$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa File: dd8e5c92-820a-3d00-9890-40b0efb85734.roa (raw, json) Hash identifier: hweLX0pXuBMYmZMHVxa9h8+4akQP9LYyuCmqnQA4B5Q= Subject key identifier: 70:25:E3:EB:22:78:BA:D7:A6:BC:5E:5A:88:5C:1D:83:03:14:C7:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784E126AA1BB0844DCB4100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 70.32.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e1:26:aa:1b:b0:84:4d:cb:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e0a1f8d2-da49-4d7d-b3e5-b7c79297f2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:2d:e0:0c:1b:85:6c:34:cd:46:f2:49:5c: a3:6e:b9:f6:09:9e:4d:51:e1:9b:60:76:09:62:f4: 91:af:82:93:7c:10:a6:a9:b8:d8:25:bd:07:b1:09: 21:9c:cc:3e:49:98:bd:e6:63:37:f3:e3:6b:2a:34: 36:3d:bf:a8:eb:c5:c6:6a:64:85:bd:8c:04:e3:54: 0a:7d:72:89:29:a8:e9:6c:07:81:ab:68:fd:f1:35: 15:fe:d1:40:96:cb:1f:66:69:d3:59:57:f7:22:b6: 06:53:55:72:aa:6c:f1:48:34:85:96:29:8a:0e:3d: d9:fe:a2:8d:65:58:6f:42:f7:fd:d6:f7:04:c0:d1: 27:42:69:4b:76:20:30:75:cf:81:50:cb:82:b5:23: 7f:b8:6c:af:9f:a5:5d:11:74:82:dd:5d:e2:22:b9: f2:1d:dd:f4:b3:9c:d0:22:5d:f4:17:36:25:ea:55: ed:9e:85:4d:dd:ad:e4:31:40:08:d1:59:43:d0:e7: cf:91:c6:c0:47:2b:3b:08:f7:95:3f:e7:f6:b3:9a: 28:dc:f9:6b:69:8a:30:ec:77:8f:d1:bc:63:65:9f: a1:6f:d8:0a:45:88:9d:d9:b9:d1:53:ff:67:d7:3a: 61:24:6d:cd:65:c4:01:0d:26:9d:10:f7:57:f3:9d: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:25:E3:EB:22:78:BA:D7:A6:BC:5E:5A:88:5C:1D:83:03:14:C7:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:22:25:ef:aa:bd:99:b1:30:1f:0c:44:5d:22:b4:c9:8b:33: e9:67:8f:83:3c:15:d5:d6:af:89:cf:5b:1b:f7:93:69:ee:46: 01:77:38:22:24:93:de:9e:f8:8d:c1:8f:c3:f9:94:a4:e0:97: d4:ec:3c:64:d6:6c:00:9e:b7:19:64:2e:3b:95:65:5d:0d:de: 59:29:c3:3a:42:ed:eb:57:9c:c8:79:28:18:16:21:cb:8f:0d: 51:e2:e2:97:46:dd:56:4f:b9:da:91:94:b1:55:c4:14:ff:fc: 98:5f:08:55:29:4a:e7:ab:a5:01:ce:69:e1:e1:89:2d:83:c7: 92:03:4a:8f:ee:ed:13:f0:82:48:51:82:da:9f:7c:e7:8e:3d: ab:e0:1c:47:a0:70:62:ff:98:58:f1:f2:d1:43:d5:87:07:e2: d1:5a:19:11:b6:70:5b:a1:31:87:5d:4b:5e:0f:62:44:2c:3b: a7:4b:8e:f0:ba:57:e3:9d:e2:1c:d6:8f:a2:71:ae:00:09:a8: 38:7c:e5:2b:27:20:7d:b3:67:66:b4:a5:ed:df:cb:61:44:f3: be:6e:f8:39:61:7b:c1:6a:7f:78:68:7c:6f:8c:8a:39:c3:28: 77:11:39:ed:6e:80:82:22:4e:40:af:36:62:a7:4b:9f:3c:e3: ee:81:34:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOEmqhuwhE3LQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTBhMWY4ZDItZGE0OS00ZDdkLWIzZTUtYjdjNzkyOTdmMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKkt4AwbhWw0zUbySVyjbrn2CZ5NUeGbYHYJ YvSRr4KTfBCmqbjYJb0HsQkhnMw+SZi95mM38+NrKjQ2Pb+o68XGamSFvYwE41QK fXKJKajpbAeBq2j98TUV/tFAlssfZmnTWVf3IrYGU1VyqmzxSDSFlimKDj3Z/qKN ZVhvQvf91vcEwNEnQmlLdiAwdc+BUMuCtSN/uGyvn6VdEXSC3V3iIrnyHd30s5zQ Il30FzYl6lXtnoVN3a3kMUAI0VlD0OfPkcbARys7CPeVP+f2s5oo3PlraYow7HeP 0bxjZZ+hb9gKRYid2bnRU/9n1zphJG3NZcQBDSadEPdX8504IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAl4+sieLrXprxeWohcHYMDFMcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ4ZTVjOTItODIwYS0z ZDAwLTk4OTAtNDBiMGVmYjg1NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIciJe+qvZmxMB8MRF0itMmLM+lnj4M8FdXWr4nPWxv3k2nuRgF3OCIk k96e+I3Bj8P5lKTgl9TsPGTWbACetxlkLjuVZV0N3lkpwzpC7etXnMh5KBgWIcuP DVHi4pdG3VZPudqRlLFVxBT//JhfCFUpSuerpQHOaeHhiS2Dx5IDSo/u7RPwgkhR gtqffOeOPavgHEegcGL/mFjx8tFD1YcH4tFaGRG2cFuhMYddS14PYkQsO6dLjvC6 V+Od4hzWj6JxrgAJqDh85SsnIH2zZ2a0pe3fy2FE875u+Dlhe8Fqf3hofG+MijnD KHcROe1ugIIiTkCvNmKnS5884+6BNOg= -----END CERTIFICATE-----Generated at Sun Apr 27 01:02:55 2025 by rpki-client